API, webhooks, and an export that gives everything back

Signed webhooks on five compliance events

Register an HTTPS endpoint and we post to it when one of these happens. Each request carries an HMAC-SHA256 signature computed over the timestamp and the body, so your receiver can prove the call came from us. Replaying the same event does not create a second delivery, and every attempt is written to a log you can read.

• sds.expiringA safety data sheet is approaching or past its review date.
• incident.createdA near miss or incident was reported.
• action.overdueA corrective action reached or passed its due date.
• permit.expiringA work permit is expiring or has expired.
• training.assignedA training was assigned to a worker.

One button, everything back

From Settings, Download everything produces a single archive: your records as structured data, your safety data sheets and signed documents as files, and a manifest listing what came out. It runs on demand, without a support ticket and without a professional services quote.

This matters more than it sounds. OSHA's retention duties name the employer and never the software vendor: 29 CFR 1904.33(a) says you must save the OSHA 300 Log, the annual summary and the 301 forms for five years after the calendar year they cover, and 29 CFR 1910.1020(d) says each employer shall preserve employee exposure records for at least thirty years, and medical records for the duration of employment plus thirty. If your records are stuck in a system you no longer have, the citation is still written to you. We wrote up what that means when you change systems in which OSHA records must come with you.

Public reference data, no key needed

The OSHA reference data this site's pages are built from is also published as JSON and plain text. No token, no sign-up, and the JSON endpoints answer any origin. Responses are cached for up to a day.

• GET /api/v1/osha-standards

  Every OSHA standard page: the CFR section, its scope, the regulation quote and whether that quote is verbatim or a summary.

• GET /api/v1/state-enforcement

  FY2025 construction citations, inspections and penalties by state, each block with its source and extraction date.

• GET /api/v1/osha-penalties

  The 2026 civil penalty maximums of 29 CFR 1903.15(d), class by class, with their citations.

• GET /api/v1/hazcom-deadlines

  The HCS 2024 compliance dates of 29 CFR 1910.1200(j), for substances and mixtures.

• GET /api/v1/glossary

  The glossary: each term's definition, its regulatory reference and its page.

• GET /llms.txt

  The site map for AI agents (llmstxt.org).

• GET /llms-full.txt

  The full text of the standard pages and the glossary, and the list of every guide, in one file.